Legal
Subprocessors
These providers help Recruit Wizard deliver its platform and may process personal information on our behalf. This list reflects our current production configuration.
- Effective date
- Last updated
01
What is a subprocessor?
A subprocessor is a service provider Recruit Wizard appoints to process personal information so that we can provide, secure, support, or administer our services. A provider processes only the information reasonably required for its role and is subject to contractual or other safeguards appropriate to the service and risk.
Processing locations describe the likely regions used for Recruit Wizard's current configuration. A provider may use additional infrastructure or support locations under its published terms. See our Privacy Policy for more information about overseas processing, security, retention, and individual rights.
02
Current subprocessors
| Provider | Purpose | Data involved | Likely processing location |
|---|---|---|---|
| Affinda | CV and resume parsing and extraction of structured candidate information. | Candidate documents and the contact, employment, education, and skills information contained in them. | Australia |
| Amazon Web Services | Cloud infrastructure and email delivery for selected Recruit Wizard services. | Customer content, email content, recipient details, delivery events, and technical logs, depending on the service used. | Australia (ap-southeast-2). |
| AssemblyAI | Audio transcription solely for the in-person AI Note Taker feature on the Recruit Wizard mobile app. | Audio, transcripts, speaker information, and related processing metadata from in-person AI Note Taker recordings. | United States |
| Azure OpenAI | Generation of AI-assisted content and other configured Recruit Wizard AI features. | Prompts and the limited job, account, or recruitment context required to generate the requested output. | Australia. |
| Better Stack | Service monitoring, logging, alerting, and incident response. | Service and request metadata, operational logs, error details, and limited operational context. | United States. |
| Blacksmith | Continuous integration, automated software builds, and testing. | Source code, build artefacts, test results, and internal engineering logs. | United States. |
| ClickUp | Internal project, task, and operational work management. | Internal operational information and limited customer or support context included in work items. | United States. |
| Cloudflare | Content delivery, network security, traffic protection, and website form verification. | IP address, request and device information, website security events, and technical logs. | Cloudflare's global edge network. |
| Freshdesk | Customer support ticketing, helpdesk, and related support communications. | Names, email addresses, organisation details, support tickets, conversation content, attachments, and related metadata. | Australia. |
| GitHub | Source code hosting, software collaboration, and release management. | Source code, internal engineering information, account details, audit records, and technical logs. | United States. |
| GoodSign | Electronic document preparation and signing. | Documents, signatory and contact details, signatures, document status, and audit records. | Australia. |
| Website analytics and traffic measurement. | Website interactions, device and browser information, and anonymised IP address data. | United States and global infrastructure. | |
| Greptile | Automated code review and internal software engineering assistance. | Source code, pull requests, review comments, and internal engineering information. | United States. |
| Hookdeck | Webhook routing, retries, monitoring, and troubleshooting. | Integration events, provider identifiers, delivery metadata, and limited event content. | United States. |
| JotForm | Online forms and operational information collection. | Respondent details, form submissions, uploaded files, and submission metadata. | United States. |
| Kinde | User authentication, identity, and access management. | Names, email addresses, account identifiers, authentication events, sessions, and access information. | Australia. |
| Linear | Internal product, issue, and engineering work management. | Internal operational information and limited customer, support, or technical context included in work items. | United States. |
| Mailchimp | Email communications, audience management, and engagement reporting. | Names, email addresses, contact attributes, communication preferences, and engagement events. | United States. |
| Microsoft 365 | Internal email, collaboration, document, and productivity tools. | Staff and business contact details, communications, internal documents, and limited customer or support context. | Microsoft global infrastructure and the configured tenant region. |
| Microsoft Azure | Core application hosting, data storage, background processing, and platform infrastructure. | Account, candidate, client, job, communication, document, audit, and service data. | Australia (East and Southeast regions). |
| NinjaRMM | Internal endpoint management, device monitoring, patching, and remote support. | Staff and device identifiers, hardware and software inventory, diagnostics, and remote support metadata. | Australia. |
| PostHog | Product analytics, feature adoption measurement, and service improvement. | User and organisation identifiers, product usage events, and device and browser information. | United States. |
| Postmark | Transactional and application email delivery and event processing. | Names, email addresses, message content, delivery events, and related metadata. | United States. |
| Recall.ai | Meeting capture, recording, and transcription solely for the Microsoft Teams AI Note Taker feature. | Meeting audio and video, transcripts, participant details, meeting identifiers, and related metadata from Microsoft Teams AI Note Taker recordings. | United States (US West (Oregon)). |
| RecDial | Calling, messaging, recording, and transcription services. | Phone numbers, call and message metadata, communication content, recordings, transcripts, and routing information. | Australia. |
| Resend | Transactional, account, support, and website enquiry email delivery. | Names, email addresses, message content, account references, and delivery events. | Tokyo. |
| Short.io | Branded link creation, routing, and click measurement. | Destination URLs, link identifiers, IP address, device information, and click events. | United States. |
| Turbopuffer | Vector storage and retrieval for configured AI search and matching features. | Vector embeddings and the limited recruitment metadata required to retrieve relevant records. | Australia (ap-southeast-2). |
| Vercel | Public website hosting, website enquiry processing, and operational delivery. | Website enquiry details, IP address, request information, application responses, and operational logs. | Vercel's global delivery network and configured hosting regions. |
| VXT | Calling, messaging, recording, and transcription services. | Phone numbers, call and message metadata, communication content, recordings, transcripts, and routing information. | Provider telephony infrastructure and support locations under its published terms. |
03
Customer-directed services
The following services are connected only when a customer or user selects, authorises, or configures them. They are not presented as general Recruit Wizard subprocessors. Information sent to one of these services is also handled under that service's agreement and privacy practices.
| Service | Use | Data involved |
|---|---|---|
| Google Workspace | Optional email synchronisation authorised by the customer and its users. | Email messages, contact details, account identifiers, and authentication information required for the configured integration. |
| iProfile | Optional candidate profile creation, updating, and management. | Candidate contact information, CV information, and profile data provided for the configured service. |
| Other customer-selected integrations | Optional recruitment, communications, screening, payroll, marketing, and workflow integrations enabled by a customer. | The records and fields required for the customer-configured integration. |
04
Changes and questions
We may update this list when we add, replace, or materially change a provider. Where required by applicable law or a customer agreement, we will notify affected customers in advance and provide a reasonable opportunity to raise a privacy-related objection. Changes required for security, legal, availability, or service-continuity reasons may take effect sooner, in which case we will provide notice as soon as reasonably practicable. Any specific notice period in a customer's agreement will apply instead.
If you have a reasonable, privacy-related objection to a new subprocessor, tell us at privacy@recruitwizard.com within the notice period. We will work with you in good faith to address the concern. Please identify the organisation you represent and the provider your question concerns so we can respond efficiently.